Date: Fri, 1 Mar 2002 14:59:50 +0100 From: Bart Matthaei <bart@dreamflow.nl> To: George.Giles@mcmail.vanderbilt.edu Cc: security@freebsd.org Subject: Re: ipfw and DHCP Message-ID: <20020301145949.D50583@heresy.dreamflow.nl> In-Reply-To: <OF25945D77.FFDCD63C-ON86256B6F.004C1698@MC.VANDERBILT.EDU>; from George.Giles@mcmail.vanderbilt.edu on Fri, Mar 01, 2002 at 07:52:26AM -0600 References: <OF25945D77.FFDCD63C-ON86256B6F.004C1698@MC.VANDERBILT.EDU>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On Fri, Mar 01, 2002 at 07:52:26AM -0600, George.Giles@mcmail.vanderbilt.edu wrote: > How do you get ipfw to pick-up DHCP value for oif in the rc.firewall script > ? There are some ways (scripting) to pass the ip from dhclient to rc.firewall. But in a DHCP setup, I would advice you to use interfaces in your firewall, instead of IPs. Example: ipfw add deny tcp from any to any 22 recv $external_interface instead of ipfw add deny tcp from any to $dhcp_ip 22 HTH. Regards, Bart -- Bart Matthaei bart@dreamflow.nl Kiss me twice. I'm schizophrenic. [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE8f4lVgcc6pR+tCegRAuVtAKDDNzRrCAAf0+WKA+eOMiPxwIwvWACeN7b8 9Nu8BmndcZavGvyM7HEWKfM= =0kYX -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020301145949.D50583>